Information security is a current theme in research and literature. The aim of this study is to find out the overall status and main deficiencies of information security management in knowledge-intensive SME’s in the Tampere region. The study is performed by a literature review and single- and group interviews. The empirical data is collected by interviewing the representatives of 16 companies over issues concerning information security management.

Information security is a complex concept. At first it is approached theoretically through different domains of information security, critical characteristics of information and information security culture. Based on the theory different definitions to information security are discussed, and information security is described as a process to secure organizational information. In the process the actions to secure information can be described through the domains on information security. Information security policy sets the guidelines to the execution of these measures, and information security culture either enables or hinders the formation of information security practises in the organization.

Based on the interviews, information security is seen mainly as a technical issue in the companies. In addition to technical issues, confidentiality of information is seen as a part of information security. Despite several views to information security were present, the overall picture of information security has yet to be developed, although in knowledge-intensive companies information has a significant role in business. The companies should aim for a more systematic process of improving information security with the help of documentation and personnel training. The study introduces a process model which could be utilized in the studied companies to better organise information security efforts. The four-phased model is applied from models found presented in the literature. It is developed especially for the needs of SME’s.

Copyright:This publication is copyrighted. You may download, display and print it for Your own personal use. Commercial use is prohibited.